===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/plus.html,v
retrieving revision 1.877
retrieving revision 1.878
diff -c -r1.877 -r1.878
*** www/plus.html	2003/05/11 18:24:58	1.877
--- www/plus.html	2003/05/28 02:50:24	1.878
***************
*** 52,65 ****
  
  <p>
  <h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p>
! The following list sums up (almost) all the changes made up to May 10.
  <p>
  
  <ul>
! <li>Merge in <a href="http://www.pdc.kth.se/heimdal/">Heimdal</a> Kerberos V 0.6rc1.
  <li>Since mfs doesn't try to force an unmount on receipt of a signal, there's no need to try to fix up processes' working dirs - the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unmount&amp;sektion=2">unmount(2)</a> will fail.
  <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a>'s handling of the IPV6_ADDR ID-type.
! <li>Remove an unnecessary <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntohs&amp;sektion=3">ntohs(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a>, unbreaking 'nat ... -> $if port n' rules.
  <!-- ^ 20030511 -->
  <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> return keyword now generates an ICMP unreachable message for all protocols other than TCP (rather than just UDP and ICMP.)
  <li>Have the compiler generate warnings if unsafe string functions are used in the kernel.
--- 52,244 ----
  
  <p>
  <h3><font color="#0000e0">We are working on OpenBSD-current.</font></h3><p>
! The following list sums up (almost) all the changes made up to May 25.
  <p>
  
  <ul>
! <!-- ^ 20030526 -->
! <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=xdm&amp;sektion=1">xdm(1)</a>'s XDMCP queries (XFree86 bug <a href="http://bugs.xfree86.org/cgi-bin/bugzilla/show_bug.cgi?id=277">#277</a>.)
! <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> binat rules after recent netmask check changes.
! <!-- ^ 20030525 -->
! <li>Improve <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a>'s netmask validity check.
! <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> properly free buffers and initialise pointers when working on tables.
! <li>Push <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> syslog output through <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strnvis&amp;sektion=3">strnvis(3)</a> first.
! <!-- ^ 20030524 -->
! <li>Fix an fdset leak in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
! <!-- ^ 20030523 -->
! <li>Remove unsafe <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sprintf&amp;sektion=9&amp;manpath=OpenBSD+3.3">sprintf(9)</a> and vsprintf() functions from the kernel.
! <!-- ^ 20030522 -->
! <li>Ignore media changes for the first command issued to an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sd&amp;sektion=4">sd(4)</a> device. See the <a href="http://helicon/cgi-bin/cvsweb/src/sys/scsi/sd.c#rev1.61">checkin comment</a> for details.
! <li>Match kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vprintf&amp;sektion=9">vprintf(9)</a> prototype to that of userland.
! <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getconf&amp;sektion=1">getconf(1)</a> return _POSIX_PATH_MAX instead of _POSIX_PIPE_MAX when asked for the former.
! <!-- ^ 20030521 -->
! <li>Now that kernels are built with propolice, build modules with it too.
! <li>New hardware monitoring sensors driver <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=it&amp;sektion=4">it(4)</a>.
! <li>Fix endianness problems in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&amp;sektion=4">dc(4)</a> that caused multicast reception to fail when using Centaur chips.
! <li>Add a missing initialisation in altq HFSC.
! <li>Add read-only NTFS support, ported from NetBSD. Not enabled in GENERIC.
! <li>Add a flag to reverse the stereo on <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=auich&amp;sektion=4">auich(4)</a>.
! <!-- ^ 20030520 -->
! <li>Limit the return value of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nice&amp;sektion=3">nice(3)</a> to -NZERO &le; nice &le; NZERO, where NZERO=20.
! <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> fail hard when fed invalid hostnames and netmasks.
! <li>Many games fixes from NetBSD.
! <li>Allow the i386 and hppa bootloaders to skip the interactive portion altogether.
! <li>Fix a badly broken switch statement affecting SO_DEBUG in tcp_input.c.
! <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&amp;sektion=1">lpr(1)</a> from checking if the printed file is an executable. Leave this to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpd&amp;sektion=8">lpd(8)</a> filters.
! <li>Use a decay filter to get better altq throughput statistics out of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a>.
! <!-- ^ 20030519 -->
! <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>'s do_log(), use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslog_r&amp;sektion=3">syslog_r(3)</a> in code that can be called from a signal handler.
! <li>Severely restrict the paths that privsep <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> can read from and write to.
! <li>Use sockaddr_storage instead of sockaddr in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> to fix interface rescanning.
! <li>Keep X.509 private keys only in the privileged part of privsep <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a>.
! <li>When using the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> SYN proxy, make sure ACKs are sent with the correct window size.
! <li>Wait longer for slow USB devices to be ready for attachment.
! <!-- ^ 20030518 -->
! <li>Don't build libperl in the libraries pass of 'make build', as we want Perl's configure to pick up details of the libraries that the build may be changing. Another leapfrog-in-waiting.
! <li>Add regen target in libkrb5 to remove (again) the dependency on an up-to-date asn1_compile.
! <li>Complain more consistently about a missing 80-wire IDE cable (for UDMA mode &gt; 2.)
! <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=syslogd&amp;sektion=8">syslogd(8)</a> don't use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strlcpy&amp;sektion=3">strlcpy(3)</a> when printing strings out of struct utmp, since those strings aren't null terminated.
! <li>Don't ARP for our IP address aliases, treat them as local.
! <li>Merge in a number of USB SCSI device updates from NetBSD.
! <li>Add experimental support for aes-ctr <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> ciphers.
! <li>Apply some of the USB SCSI improvements to the FireWire code as well.
! <li>Add string length bounds to an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sscanf&amp;sektion=3">sscanf(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>'s rhosts auth code.
! <li>Pull in a fix for directory creation under <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&amp;sektion=1">systrace(1)</a>.
! <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> rdr rules with address pools using bitmask and source-hash address selection.
! <li>Allow inverse matching of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> tags.
! <li>Fix media handling for Intel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dc&amp;sektion=4">dc(4)</a> devices.
! <!-- ^ 20030517 -->
! <li>Use the right buffer in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&amp;sektion=8">spamd(8)</a>'s connection handler.
! <li>Use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&amp;sektion=2">mmap(2)</a> instead of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&amp;sektion=3">malloc(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vfprintf&amp;sektion=3">vfprintf(3)</a> when more memory is needed to store arguments. See the <a href="http://helicon/cgi-bin/cvsweb/src/lib/libc/stdio/vfprintf.c#rev1.19">checkin comment</a> for why.
! <li>New Renegotiate-on-HUP option for the [general] section of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd.conf&amp;sektion=5">isakmpd.conf(5)</a> will cause all Phase 2 SAs to be renegotiated.
! <li>Fix a couple of signedness nits in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&amp;sektion=1">ksh(1)</a>.
! <li>Improvements to USB SCSI support.
! <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mg&amp;sektion=1">mg(1)</a>'s up and down cursor movement.
! <li>Have <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ksh&amp;sektion=1">ksh(1)</a> use the libc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dup2&amp;sektion=2">dup2(2)</a> instead of its own.
! <li>Fare thee well, Kerberos IV.
! <li>Another big-bucks firewall feature performed by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a>: TCP SYN proxy, enabled with 'synproxy state' (this implies modulate state.)
! <li>New AddressFamily option for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> that works like the -4 and -6 command line options (portable OpenSSH <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=534">bug 534</a>.)
! <li>Allow address comparison in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=wi&amp;sektion=4">wi(4)</a> to work on sparc64.
! <li>Prevent a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=spamd-setup&amp;sektion=8">spamd-setup(8)</a> crash with a config file consisting of only invalid input.
! <!-- ^ 20030516 -->
! <li>Don't assume that rt-&gt;rt_ifp is valid in IPv6 neighbour discovery.
! <li>Add new ConnectTimeout option to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
! <li>Disable Kerberos options to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> programs if Kerberos isn't compiled in, and warn if they're used.
! <li>Have 'ssh -V' print the OpenSSL version properly, instead of trying to %s on a long. 
! <li>Repair IPsec forwarding for IPv6, fixing PR#3231.
! <li>Fix a hang in libwrap when the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=hosts_access&amp;sektion=5">hosts_access(5)</a> file has a line containing &gt; 2048 characters. (NetBSD pr#15025.)
! <li>Add multi-column output to the ls command of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp&amp;sektion=1">sftp(1)</a>.
! <li>Wash untrusted input to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mail&amp;sektion=1">mail(1)</a> through <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vis&amp;sektion=3">vis(3)</a> before display.
! <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a>, don't store the private key in data structures we pass around a lot.
! <li>Fix a missing <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=freerrset&amp;sektion=3">freerrset(3)</a> in new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> dnsfp code.
! <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fmt_scaled&amp;sektion=3">fmt_scaled(3)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scan_scaled&amp;sektion=3">scan_scaled(3)</a> functions in libutil, for writing and reading numbers with human-readable scales.
! <li>Like for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&amp;sektion=8">sysctl(8)</a>, add a -q option to shut <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mixerctl&amp;sektion=1">mixerctl(1)</a>'s -w option up.
! <li>Preliminary privilege separation support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a>, not enabled by default for now.
! <li>Fix deregistration of per-authentication method handlers in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
! <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=faithd&amp;sektion=8">faithd(8)</a> specify IPPROTO_TCP explicitly in anticipation of a day when <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&amp;sektion=3">getaddrinfo(3)</a> supports sctp.
! <!-- ^ 20030515 -->
! <li>Prepare to move all KerberosV libraries to /usr/lib.
! <li>More TCP scrubbing: Modulate TCP timestamps to frustrate NAT detection and prevent remote uptime guesses. New scrub option 'reassemble tcp'.
! <li>Kill more unwanted <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=le&amp;sektion=4&arch=i386">le(4)</a> 'lost carrier' moans.
! <li>Remove the rather short-lived kernel option LONGRUN, it's now standard except SMALL_KERNEL is defined.
! <li>Enable <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> tagging support for rdr and binat rules.
! <li>Add _isakmpd user and group for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> privsep.
! <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> clients to send a BREAK to the remote server if it supports it (SSHv2 only.)
! <li>Add _kdc and _kadmin users and groups for the respective KerberosV <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdc&amp;sektion=8">kdc(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kadmind&amp;sektion=8">kadmind(8)</a> daemons.
! <li>On i386, support Transmeta LongRun power management (kernel option LONGRUN, enabled by default.)
! <li>Add a <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> tag for each rule that matches, not just the last one.
! <li>Remove gated stuff from /etc/rc and /etc/rc.conf.
! <li>Add experimental support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> host key fingerprint verification using DNS records (dnsfp.) Not built by default. See src/usr.bin/ssh/README.dns for details and build instructions.
! <li>Unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&amp;sektion=3">malloc(3)</a> map_pages() failure test on 64-bit architectures.
! <li>Back out many recent <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> changes until they're working right.
! <li>Disable KerberosIV support in XFree.
! <li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a> privsep children die when the monitor parent goes away (OpenSSH <a href="http://bugzilla.mindrot.org/show_bug.cgi?id=560">bug 560</a>.)
! <li>Upgrade <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflogd&amp;sektion=8">pflogd(8)</a> to use the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&amp;sektion=4">bpf(4)</a> link type too.
! <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&amp;sektion=8">tcpdump(8)</a> and libpcap about the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&amp;sektion=4">pflog(4)</a> link type in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&amp;sektion=4">bpf(4)</a>.
! <li>Upgrade <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bpf&amp;sektion=4">bpf(4)</a> support for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pflog&amp;sektion=4">pflog(4)</a> link type to the 'official' and more extensible version from the <a href="http://www.tcpdump.org/">libpcap</a> people.
! <li>Start stripping out KerberosIV support from programs.
! <li>When handling a numeric nodename in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getaddrinfo&amp;sektion=3">getaddrinfo(3)</a>, set the canonical hostname to the numeric address as per <a href="http://www.ietf.org/rfc/rfc3493.txt">RFC3493</a>.
! <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vis&amp;sektion=3">vis(3)</a>'s VIS_SAFE behaviour match the manpage w.r.t <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isgraph&amp;sektion=3">isgraph(3)</a>.
! <li>Allow tags to be specified for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> block rules (which aren't allowed to keep state.)
! <li>Allow the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&amp;sektion=5">pf.conf(5)</a> scrub keyword to take a protocol specifier again.
! <li>Remove KerberosIV support from KerberosV code.
! <li>Add packet tag support for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> nat rules.
! <li>Correct a string length problem and a missing null init in libreadline.
! <li>Add kerberos-over-ssh2 support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>.
! <li>Reapply the move of Ethernet definitions to &lt;net/ethertypes.h&gt;, but this time have &lt;netinet/if_ether.h&gt; read them in for compatibility reasons.
! <li>New -q flag for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&amp;sektion=8">sysctl(8)</a> to suppress output from the -w option.
! <li>Fix a circular dependency by removing libtelnet, instead compile the code directly into <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnet&amp;sektion=1">telnet(1)</a>, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=telnetd&amp;sektion=8">telnetd(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tn3270&amp;sektion=1">tn3270(1)</a> from files in libexec/telnetd.
! <li>Move contents of libkafs into libkrb5, leave libkafs as an empty dummy library.
! <li>Fix a use-after-free in the new <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> tagging code in the kernel.
! <li>Enable the increasingly popular <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=em&amp;sektion=4">em(4)</a> driver by default on i386 RAMDISK* kernels.
! <li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=rdist&amp;sektion=1">rdist(1)</a> with freerdist version 0.92, minus the compress option.
! <li>Don't build KerberosIV programs. Libraries still built for the moment.
! <li>Move blktochr() and chrtoblk() into kernel MI code.
! <li>Add [bc]devsw_lookup() kernel convenience functions.
! <!-- ^ 20030514 -->
! <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> make sure packet tagging is only used on stateful filter rules.
! <li>Add NO_PROPOLICE kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=config&amp;sektion=8">config(8)</a> option to build the kernel without the stack protector. Handy for install media.
! <li>Fix a string length off-by-one in libreadline.
! <li>Add userland portion of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> packet tagging support.
! <li>Disable afs until it can be made to work sans KerberosIV.
! <li>Force global 'time' structure to be quad_t aligned, unbreaking sparc <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=microtime&amp;sektion=9">microtime(9)</a> and possibly other things too.
! <li>Add support in kernel <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> for tagging packets, and filtering based on those tags.
! <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mbuf&amp;sektion=9">mbuf(9)</a> tag PACKET_TAG_PF_TAG.
! <li>Make sure <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lndir&amp;sektion=1">lndir(1)</a> doesn't try to use -1 as an array index when reading a directory.
! <li>On ELF architectures, support the blocking of thread switches during non-thread-safe dynamic loader operations.
! <li>Sync ELF identification indexes with the <a href="http://www.caldera.com/developers/gabi/2000-07-17/ch4.eheader.html">System V ABI</a> specs.
! <li>Stop AM7990 (<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=le&amp;sektion=4&arch=i386">le(4)</a>) devices emitting 'lost carrier' messages.
! <li>Back out &lt;netinet/if_ether.h&gt; changes after they caused userland meltdown. 
! <li>Add propolice stack-smash protector support to the kernel, and build the kernel using it on architectures that support propolice.
! <li>Re-enable NULLFS, UMAPFS and UNION in the GENERIC kernel.
! <li>Move Ethernet definitions from &lt;netinet/if_ether.h&gt; to new &lt;net/ethertypes.h&gt;, like NetBSD.
! <li>Disable Kerberos V-to-IV conversion in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_krb5&amp;sektion=8">login_krb5(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_krb5-or-pwd&amp;sektion=8">login_krb5-or-pwd(8)</a>
! <li>Stop building <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_krb4&amp;sektion=8">login_krb4(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login_krb4-or-pwd&amp;sektion=8">login_krb4-or-pwd(8)</a>.
! <li>Remove references to krb4 from <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=login.conf&amp;sektion=5">login.conf(5)</a>.
! <li>Changes to the way protection fault traps are handled on i386, see the <a href="http://www.openbsd.org/cgi-bin/cvsweb/src/sys/arch/i386/i386/machdep.c#rev1.229">checkin comment</a> for details and Intel abuse.
! <li>Merge in <a href="http://www.pdc.kth.se/heimdal/">Heimdal</a> KerberosV 0.6.
! <li>Stop <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=user&amp;sektion=8">user(8)</a> from accepting usernames beginning with a slash.
! <li>Don't report unsupported <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=scsi&amp;sektion=4">scsi(4)</a> devices as offline.
! <!-- ^ 20030513 -->
! <li>When testing TCP window sizes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a>, don't apply the window scaling factor for SYN packets. Do, however, apply the scaling factor when testing ACKs.
! <li>Fix a bug in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&amp;sektion=1">pkg_add(1)</a> that was causing recursive dependency searches to fail.
! <li>More <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> definitions for NAT-T, IKEv2 and EAP.
! <li>Locking and other fixes to unionfs.
! <li>Add BLOCK_SIZE attribute to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a>, and rename AES ESP transform to AES_128_CBC.
! <li>Add UDP encapsulation type definitions (not code) to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a> with an eye to future NAT-T support.
! <li>Adapt nullfs and umapfs to use common code from genfs.
! <li>New genfs code for layered filesystem support.
! <li>Wash print queue names through <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vis&amp;sektion=3">vis(3)</a> before output.
! <li>Teach <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ctags&amp;sektion=1">ctags(1)</a> to understand '//' comments, ignore declarations of function types, and accept __attribute__. From NetBSD.
! <li>Correctly check for empty output from an <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&amp;sektion=1">at(1)</a> command (PR#3252.)
! <li>New <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ddb&amp;sektion=4">ddb(4)</a> command 'show proc' which, er, shows process information.
! <li>Sync <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=popa3d&amp;sektion=8">popa3d(8)</a> to version 0.6.2.
! <li>Improvements and bugfixes to the installer's handing of ftp and http downloads.
! <li>Reorder <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> IPv6 address comparison to check the least-significant bits first, since these are more likely to differ.
! <li>Make sure the state search trees are properly in initialised when attaching <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a>.
! <li>Remove a number of KerberosV files that are not used by OpenBSD.
! <li>When doing pubkey authentication in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>, prefer agent-stored keys that are referred to in the config file. This can reduce the likelihood of the server disconnecting before it gets to a valid key when the agent is storing many keys.
! <li>Start preparations to remove KerberosIV.
! <li>Remove a number of redundant declarations in games/. From NetBSD.
! <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=file&amp;sektion=1">file(1)</a> now recognises Ogg Vorbis audio files.
! <li>Use the asn1_compile in src/usr.bin instead of that in src/kerberosV.
! <li>More string fixes to libreadline, this time with no ABI changes.
! <li>Fix a sign overflow in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=csh&amp;sektion=1">csh(1)</a>.
! <li>Merge in OpenSSL 0.9.7b (without IDEA, MDC2 and RC5.)
! <li>Implement adaptive state table timeouts in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a>, reducing the state timeout value inversely with the number of states present.
! <!-- ^ 20030512 -->
! <li>Break asn1_compile out from KerberosV into src/usr.bin.
! <li>First phase of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> stateful TCP scrubbing: Frustrate TTL-based NIDS evasion by determining on the fly the highest TTL, and enforcing it as the minimim TTL for all subsequent packets.
! <li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&amp;sektion=1">ssh(1)</a>, Do the xstrdup() of the remote_name inside channel_new() instead of making the caller do it.
! <li>Start to fix the annoying asn1_compile leapfrog problem when upgrading KerberosV by putting the generated files into the tree.
! <li>Make sure a hole at the end of a sparse file created by <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=install&amp;sektion=1">install(1)</a> actually gets written on all filesystems.
! <li>The installer now accepts absolutely absolute paths (relative to the installer's root directory, not the virtual mountpoint) for local sets.
! <li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-keygen&amp;sektion=1">ssh-keygen(1)</a>'s -e option fail gracefully if the user specifies an SSH1 key. (NetBSD pr#20550.)
! <li>Avoid offence to Klingons by spelling 'Kang' correctly. <!-- No, really. -->
! <li>Merge in <a href="http://www.pdc.kth.se/heimdal/">Heimdal</a> KerberosV 0.6rc1.
  <li>Since mfs doesn't try to force an unmount on receipt of a signal, there's no need to try to fix up processes' working dirs - the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=unmount&amp;sektion=2">unmount(2)</a> will fail.
  <li>Fix <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd&amp;sektion=8">isakmpd(8)</a>'s handling of the IPV6_ADDR ID-type.
! <li>Remove an unnecessary <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ntohs&amp;sektion=3">ntohs(3)</a> in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a>, unbreaking 'nat ... -&gt; $if port n' rules.
  <!-- ^ 20030511 -->
  <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> return keyword now generates an ICMP unreachable message for all protocols other than TCP (rather than just UDP and ICMP.)
  <li>Have the compiler generate warnings if unsafe string functions are used in the kernel.
***************
*** 117,123 ****
  <!-- ^ 20030505 -->
  <li>Use the right buffer size for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getcwd&amp;sektion=3">getcwd(3)</a> to avoid unnecessary truncation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&amp;sektion=1">at(1)</a>.
  <li>Replace local (and wrong) basename logic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ln&amp;sektion=1">ln(1)</a> with a call to the real <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=basename&amp;sektion=3">basename(3)</a>.
! <li>Don't leak an mbuf when dropping non-ARPHRD_ETHER arp packets.
  <!-- ^ 20030504 -->
  <li>Compatibility improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ossaudio&amp;sektion=3">ossaudio(3)</a>, mostly from NetBSD.
  <li>Ditch <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&amp;sektion=8">newfs(8)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_mfs&amp;sektion=8">mount_mfs(8)</a>'s homespun malloc() in favour of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&amp;sektion=2">mmap(2)</a>.
--- 296,303 ----
  <!-- ^ 20030505 -->
  <li>Use the right buffer size for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getcwd&amp;sektion=3">getcwd(3)</a> to avoid unnecessary truncation in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=at&amp;sektion=1">at(1)</a>.
  <li>Replace local (and wrong) basename logic in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ln&amp;sektion=1">ln(1)</a> with a call to the real <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=basename&amp;sektion=3">basename(3)</a>.
! <li>Don't leak an mbuf when dropping non-ARPHRD_ETHER arp packets.<br>
!     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
  <!-- ^ 20030504 -->
  <li>Compatibility improvements to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ossaudio&amp;sektion=3">ossaudio(3)</a>, mostly from NetBSD.
  <li>Ditch <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs&amp;sektion=8">newfs(8)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_mfs&amp;sektion=8">mount_mfs(8)</a>'s homespun malloc() in favour of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mmap&amp;sektion=2">mmap(2)</a>.
***************
*** 137,144 ****
  <li>Keep trying to unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apachectl&amp;sektion=8">apachectl(8)</a> restarts for shared modules when running under the chroot.
  <li>Improve forward compatiblity of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_ffs&amp;sektion=8">fsck_ffs(8)</a> by comparing only what we understand instead of trying to ignore what we don't.
  <li>Make the newly deprecated omsync() work under NetBSD emulation.
! <li>Several <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strvis&amp;sektion=3">strvis(3)</a> -> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strnvis&amp;sektion=3">strnvis(3)</a> changes, all part of the continuing Battle for Safe String Functions.
! <li>Fix some pthreads signal bugs that were causing MySQL to crash (PR#3178, PR#3238.)
  <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> tables to be loaded into anchors. <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> table options except show and flush now honour -a.
  <!-- ^ 20030430 -->
  <li>Have the dynamic linker stub functions in libc return -1 if called from a statically linked program. 
--- 317,325 ----
  <li>Keep trying to unbreak <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=apachectl&amp;sektion=8">apachectl(8)</a> restarts for shared modules when running under the chroot.
  <li>Improve forward compatiblity of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fsck_ffs&amp;sektion=8">fsck_ffs(8)</a> by comparing only what we understand instead of trying to ignore what we don't.
  <li>Make the newly deprecated omsync() work under NetBSD emulation.
! <li>Several <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strvis&amp;sektion=3">strvis(3)</a> -&gt; <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=strnvis&amp;sektion=3">strnvis(3)</a> changes, all part of the continuing Battle for Safe String Functions.
! <li>Fix some pthreads signal bugs that were causing MySQL to crash (PR#3179, PR#3238.)<br>
!     <a href="stable.html"><font color="#00b000">[Applied to stable]</font></a> <!-- XXX 3.3-stable -->
  <li>Allow <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> tables to be loaded into anchors. <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&amp;sektion=8">pfctl(8)</a> table options except show and flush now honour -a.
  <!-- ^ 20030430 -->
  <li>Have the dynamic linker stub functions in libc return -1 if called from a statically linked program. 
***************
*** 358,364 ****
  <li>Actually look for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&amp;sektion=1">lpr(1)</a> -q option when calling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&amp;sektion=3">getopt(3)</a>.
  <li>Fix handling of -f and -h options to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&amp;sektion=1">lpr(1)</a>.
  <li>Improve error handling for invalid <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> cbq and priq flags.
! <li>3.3 -> 3.3-current.
  <!-- ^ 20030327 -->
  </ul>
  <p>
--- 539,545 ----
  <li>Actually look for the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&amp;sektion=1">lpr(1)</a> -q option when calling <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getopt&amp;sektion=3">getopt(3)</a>.
  <li>Fix handling of -f and -h options to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=lpr&amp;sektion=1">lpr(1)</a>.
  <li>Improve error handling for invalid <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&amp;sektion=4">pf(4)</a> cbq and priq flags.
! <li>3.3 -&gt; 3.3-current.
  <!-- ^ 20030327 -->
  </ul>
  <p>
***************
*** 392,398 ****
  <hr>
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a> 
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
! <br><small>$OpenBSD: plus.html,v 1.877 2003/05/11 18:24:58 deraadt Exp $</small>
  
  </body>
  </html>
--- 573,579 ----
  <hr>
  <a href="index.html"><img height=24 width=24 src="back.gif" border=0 alt="OpenBSD"></a> 
  <a href="mailto:www@openbsd.org">www@openbsd.org</a>
! <br><small>$OpenBSD: plus.html,v 1.878 2003/05/28 02:50:24 deraadt Exp $</small>
  
  </body>
  </html>